Platform Security Engineer

Chatham Financial is hiring a Platform Security Engineer to evolve the security platform function for a cloud-native financial risk and advisory SaaS business. This onsite role in Kennett Square, PA focuses on building security controls that scale across Azure infrastructure, containerized environments, and .NET application delivery.

The position centers on embedding security into the Software Development Life Cycle (SDLC) through CI/CD integrations and developer workflows, while also strengthening compliance alignment with SOC 2 through durable security practices and evidence automation.

Responsibilities

• Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET applications at the platform level to support broad coverage
• Ship security-focused capabilities and features that are leveraged across the development platform
• Implement and mature cloud security and application security practices, including secure architecture patterns
• Collaborate cross-functionally with Engineering, Compliance, and Information Security to integrate security into the SDLC via CI/CD pipelines and developer workflows
• Implement cloud security scanning and posture management to reduce misconfigurations, vulnerabilities, and configuration drift across Azure environments
• Identify and address emerging risks related to AI/LLM usage across the SDLC
• Evaluate, implement, and operate platform tooling with a focus on automation and scalability
• Use AI to support engineering work, including learning, investigations and debugging, and creation and review of code
• Document platform standards for secure coding

Requirements

• 3+ years of experience in security engineering with a strong foundation in software or cloud engineering
• Experience building applications across the full SDLC, from initial coding through production deployment and operations
• Experience integrating security into CI/CD pipelines and developer tooling
• Hands-on cloud security expertise with Azure required and AWS familiarity preferred
• Experience securing modern application stacks, including .NET applications and containerized environments
• Strong application security principles, including secure coding practices, threat modeling, and common vulnerabilities such as OWASP Top 10
• Strong problem-solving skills with the ability to operate tactically
• Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
• Excellent collaboration and communication skills, especially when working with engineering teams and Information Security

Technologies

• Azure, AWS, .NET, CI/CD
• SAST, DAST, CSPM
• OWASP Top 10

What Success Looks Like (First 12 Months)

• Reduced the burden of implementing secure coding for all Engineering teams
• Collaborated effectively with adjacent teams including Information Security, Engineering, Governance/Risk/Compliance, and IT
• Prioritized effectively operational work alongside project development
• Implemented effective security controls via code within CI/CD pipelines and development workflows
• Strengthened and matured cloud and application security practices across the organization
• Maintained and improved robust policy scanning and vulnerability management practices
• Automated and maintained audit control evidence to meet SOC 2 requirements